CVE-2026-41558

WP Synchro WP Migration Plugin DB & Files – WP Synchro

Published 6 Oct 2026 · updated 6 Oct 2026 · Received

7.5 High · CVSS 3.1, patchstack.com

Description

Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro <= 1.16.1 versions.

References

patchstack.com/database/wordpress/plugin/wpsynchro/vulnerability/wordpress-wp-migration-plugin-db-files-wp-synchro-plugin-1-16-1-2fa-bypass-vulnerability?_s_id=cve